CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12871

The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.4%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2017-12871

Simplesamlphp » Simplesamlphp » Version: 1.14.0

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.0
Simplesamlphp » Simplesamlphp » Version: 1.14.1

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.1
Simplesamlphp » Simplesamlphp » Version: 1.14.10

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.10
Simplesamlphp » Simplesamlphp » Version: 1.14.11

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.11
Simplesamlphp » Simplesamlphp » Version: 1.14.2

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.2
Simplesamlphp » Simplesamlphp » Version: 1.14.3

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.3
Simplesamlphp » Simplesamlphp » Version: 1.14.4

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.4
Simplesamlphp » Simplesamlphp » Version: 1.14.5

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.5
Simplesamlphp » Simplesamlphp » Version: 1.14.6

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.6
Simplesamlphp » Simplesamlphp » Version: 1.14.7

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.7
Simplesamlphp » Simplesamlphp » Version: 1.14.8

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.8
Simplesamlphp » Simplesamlphp » Version: 1.14.9

cpe:2.3:a:simplesamlphp:simplesamlphp:1.14.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12871

Products

Pricing

Contact Us